10 Oct 2008
Consultancy firm Deloitte has admitted that the loss of a laptop containing BSkyB staff pension details also included information about pension scheme members from Network Rail and British Transport Police.
The laptop theft – revealed exclusively by Computing yesterday – contained details of more than 100,000 people, including names, national insurance numbers and salaries.
BskyB told Computing that the laptop was protected by a number of security measures, including passwords, user IDs and encryption – a fact now confirmed in a statement from Deloitte.
"We believe that the likelihood of unauthorised access to the data held on this laptop is remote due to the opportunistic nature of the theft and the security controls," said the statement.
Both companies described the incident as being “opportunistic”.
“The thief could not have been aware that the bag – which was not a laptop bag – contained a laptop and therefore the theft was not targeted,” said BSkyB in a letter seen by Computing that was sent to all employees whose data may have been stored in the computer.
In a separate incident, the Ministry of Defence announced earlier today that it was investigating the loss of a computer hard drive that could contain the personal details of 100,000 members of the armed forces.
Why were my details on there?
I work for Vodafone, I received the letter on monday telling me my details have been lost during an audit on vodafone pensions.
But i am not part of the pension scheme, I have never been part of it, and i have been there for years! Why isn't my data better protected, the data protection act specifies that if it is not absolutely necessary my details should be erased. So why am i on there?
Posted by: Vodafone employee 16 Oct 2008
Well I think you can add Vodafone Pensions to the list as well as of this morning.
What incompetence. What are people doing with personal data on portable devices. This should be locked down on business servers and only accessible through proper security methods. I guess that the laptop was not encrypted.......basic, basic security mechanism, just shows the cavalier approach that companies are taking with our data.
Can I sue Deloittes when my identity is stolen?
Posted by: Mick 13 Oct 2008
Have your say on this article
Newsletters
Latest stories from Security Technology
Latest videos
You may also like
Security Technology jobs
Will Google’s new privacy policy impact how you use its services?
Rubbish in... rubbish enterprise. Why proper data management is so important (video, 6 min)
This Forrester report compares the costs and benefits of legacy email and productivity software with Google Apps
Upcoming Events
Join us to meet other professionals tackling this issue, and hear from Goy Roper, interim head of ICT of Norfolk County Council how his organisation deployed a flexible and intelligent network to cope with the challenge
Date: 07 Mar 2012
Time: 9am
The implementation of robust, relevant digital strategies is more crucial than ever to the success of insurance businesses
Date: 01 Mar 2012
Time: 09:00am
Receive the latest jobs direct to your inbox
Are you being paid what you are worth?
